Hard Time (Prison Sim) - Dangerous filesystem permissions, Insecure KeyStore, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Hard Time Prison Sim published at the 'play' market has multiple vulnerabilities...

CVE-2014-5558

The CVE-2014-5558 issue affects the Android app Hard Time (Prison Sim) 1.111 (aka air.HardTime). The vulnerability is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. The co...

CVE-2014-5558: Undefined Security Weakness

The Hard Time Prison Sim aka air.HardTime application 1.111 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...